Beyond the Safeguards: Exploring the Security Risks of ChatGPT
Not on the map. Why?
Abstract (arXiv)
The increasing popularity of large language models (LLMs) such as ChatGPT has led to growing concerns about their safety, security risks, and ethical implications. This paper aims to provide an overview of the different types of security risks associated with ChatGPT, including malicious text and code generation, private data disclosure, fraudulent services, information gathering, and producing unethical content. We present an empirical study examining the effectiveness of ChatGPT's content filters and explore potential ways to bypass these safeguards, demonstrating the ethical implications and security risks that persist in LLMs even when protections are in place. Based on a qualitative analysis of the security implications, we discuss potential strategies to mitigate these risks and inform researchers, policymakers, and industry professionals about the complex security challenges posed by LLMs like ChatGPT. This study contributes to the ongoing discussion on the ethical and security implications of LLMs, underscoring the need for continued research in this area.
Key facts. Cited by 36 papers in the map (data through 7 Oct 2026). Builds on 28 of its 40 references that are in the map. First posted on arXiv 13 May 2023.
Builds on
28 of 40 references.
References · 28
- 2017Attention Is All You Needcited by 59,932
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
- 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 336
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
16 more
- 2021Towards Understanding and Mitigating Social Biases in Language Modelscited by 294
- 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 268
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2021Understanding the Capabilities, Limitations, and Societal Impact of Large Language Modelscited by 159
- 2021Bias Out-of-the-Box: An Empirical Analysis of Intersectional Occupational Biases in Popular Generative Language Modelscited by 141
- 2021Detoxifying Language Models Risks Marginalizing Minority Voicescited by 106
- 2023Regulating ChatGPT and other Large Generative AI Modelscited by 102
- 2023BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPTcited by 70
- 2019Membership Inference Attacks on Sequence-to-Sequence Models: Is My Data In Your Machine Translation System?cited by 68
- 2022Theories of "Gender" in NLP Bias Researchcited by 62
- 2021Mitigating harm in language models with conditional-likelihood filtrationcited by 38
- 2021Generating Fake Cyber Threat Intelligence Using Transformer-Based Modelscited by 28
- 2022Targeted Phishing Campaigns using Large Scale Language Modelscited by 22
- 2022Adaptive Sampling Strategies to Construct Equitable Training Datasetscited by 18
- 2023Perspectives on the Social Impacts of Reinforcement Learning with Human Feedbackcited by 15
- 2023Towards Safer Generative Language Models: A Survey on Safety Risks, Evaluations, and Improvementscited by 14
Built on by
Citing papers per year: 2023: 11; 2024: 18; 2025: 5; 2026: 2.
36 papers.
Sort:
By area:
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 100
- 2024Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstructioncited by 95
- 2023GPTEval: A Survey on Assessments of ChatGPT and GPT-4cited by 73
- 2024A Complete Survey on LLM-based AI Chatbotscited by 71
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 65
- 2024AI Safety in Generative AI Large Language Models: A Surveycited by 31
- 2023Distilled GPT for Source Code Summarizationcited by 30
- 2024The Ethics of Interaction: Mitigating Security Threats in LLMscited by 30
- 2024Farsight: Fostering Responsible AI Awareness During AI Application Prototypingcited by 28
- 2023On the Detectability of ChatGPT Content: Benchmarking, Methodology, and Evaluation through the Lens of Academic Writingcited by 26
24 more
- 2023Using Large Language Models for Cybersecurity Capture-The-Flag Challenges and Certification Questionscited by 23
- 2024Towards Trustworthy AI: A Review of Ethical and Robust Large Language Modelscited by 21
- 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Reviewcited by 19
- 2023RatGPT: Turning online LLMs into Proxies for Malware Attackscited by 17
- 2023Efficient Avoidance of Vulnerabilities in Auto-completed Smart Contract Code Using Vulnerability-constrained Decodingcited by 14
- 2023From Chatbots to PhishBots? -- Preventing Phishing scams created using ChatGPT, Google Bard and Claudecited by 12
- 2024SmartMem: Layout Transformation Elimination and Adaptation for Efficient DNN Execution on Mobilecited by 12
- 2024Risk and Response in Large Language Models: Evaluating Key Threat Categoriescited by 10
- 2023Ask Again, Then Fail: Large Language Models' Vacillations in Judgmentcited by 8
- 2024Exploring the Potential of Large Language Models for Improving Digital Forensic Investigation Efficiencycited by 7
- 2023Learning to Prompt in the Classroom to Understand AI Limits: A pilot studycited by 6
- 2024FreezeAsGuard: Mitigating Illegal Adaptation of Diffusion Models via Selective Tensor Freezingcited by 4
- 2024Unanswerability Evaluation for Retrieval Augmented Generationcited by 4
- 2024Tagengo: A Multilingual Chat Datasetcited by 3
- 2024Whispers in the Machine: Confidentiality in Agentic Systemscited by 2
- 2025SOK: Exploring Hallucinations and Security Risks in AI-Assisted Software Development with Insights for LLM Deploymentcited by 2
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessmentcited by 2
- 2024Is On-Device AI Broken and Exploitable? Assessing the Trust and Ethics in Small Language Modelscited by 1
- 2025Two Birds with One Stone: Multi-Task Detection and Attribution of LLM-Generated Textcited by 1
- 2025LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systemscited by 1
- 2026LanG -- A Governance-Aware Agentic AI Platform for Unified Security Operationscited by 1
- 2026Reasoning and Planning with Dynamically Changing Normscited by 1
- 2024Improving Dialog Safety using Socially Aware Contrastive Learningcited by 0
- 2025AI Ethics and Social Norms: Exploring ChatGPT's Capabilities From What to Howcited by 0
- 2026Reasoning and Planning with Dynamically Changing Norms26 May 2026
- 2026LanG -- A Governance-Aware Agentic AI Platform for Unified Security Operations7 Apr 2026
- 2025LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems12 Sep 2025
- 2025Two Birds with One Stone: Multi-Task Detection and Attribution of LLM-Generated Text19 Aug 2025
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment12 Aug 2025
- 2025AI Ethics and Social Norms: Exploring ChatGPT's Capabilities From What to How25 Apr 2025
- 2025SOK: Exploring Hallucinations and Security Risks in AI-Assisted Software Development with Insights for LLM Deployment31 Jan 2025
- 2024Unanswerability Evaluation for Retrieval Augmented Generation16 Dec 2024
- 2024AI Safety in Generative AI Large Language Models: A Survey6 Jul 2024
- 2024The Art of Saying No: Contextual Noncompliance in Language Models2 Jul 2024
- 2024A Complete Survey on LLM-based AI Chatbots17 Jun 2024
- 2024Is On-Device AI Broken and Exploitable? Assessing the Trust and Ethics in Small Language Models8 Jun 2024
24 more
- 2024Towards Trustworthy AI: A Review of Ethical and Robust Large Language Models1 Jun 2024
- 2024FreezeAsGuard: Mitigating Illegal Adaptation of Diffusion Models via Selective Tensor Freezing24 May 2024
- 2024Tagengo: A Multilingual Chat Dataset21 May 2024
- 2024Large Language Models for Cyber Security: A Systematic Literature Review8 May 2024
- 2024SmartMem: Layout Transformation Elimination and Adaptation for Efficient DNN Execution on Mobile21 Apr 2024
- 2024Risk and Response in Large Language Models: Evaluating Key Threat Categories22 Mar 2024
- 2024Exploring the Potential of Large Language Models for Improving Digital Forensic Investigation Efficiency29 Feb 2024
- 2024Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction28 Feb 2024
- 2024Farsight: Fostering Responsible AI Awareness During AI Application Prototyping23 Feb 2024
- 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Review13 Feb 2024
- 2024Whispers in the Machine: Confidentiality in Agentic Systems10 Feb 2024
- 2024Improving Dialog Safety using Socially Aware Contrastive Learning1 Feb 2024
- 2024The Ethics of Interaction: Mitigating Security Threats in LLMs22 Jan 2024
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly4 Dec 2023
- 2023From Chatbots to PhishBots? -- Preventing Phishing scams created using ChatGPT, Google Bard and Claude29 Oct 2023
- 2023Ask Again, Then Fail: Large Language Models' Vacillations in Judgment3 Oct 2023
- 2023Can LLM-Generated Misinformation Be Detected?25 Sep 2023
- 2023Efficient Avoidance of Vulnerabilities in Auto-completed Smart Contract Code Using Vulnerability-constrained Decoding18 Sep 2023
- 2023Distilled GPT for Source Code Summarization28 Aug 2023
- 2023GPTEval: A Survey on Assessments of ChatGPT and GPT-424 Aug 2023
- 2023Using Large Language Models for Cybersecurity Capture-The-Flag Challenges and Certification Questions21 Aug 2023
- 2023RatGPT: Turning online LLMs into Proxies for Malware Attacks17 Aug 2023
- 2023Learning to Prompt in the Classroom to Understand AI Limits: A pilot study4 Jul 2023
- 2023On the Detectability of ChatGPT Content: Benchmarking, Methodology, and Evaluation through the Lens of Academic Writing7 Jun 2023
- 2024Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstructioncited by 95
- 2024The Ethics of Interaction: Mitigating Security Threats in LLMscited by 30
- 2024Risk and Response in Large Language Models: Evaluating Key Threat Categoriescited by 10
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessmentcited by 2
- 2024Is On-Device AI Broken and Exploitable? Assessing the Trust and Ethics in Small Language Modelscited by 1
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment12 Aug 2025
- 2024Is On-Device AI Broken and Exploitable? Assessing the Trust and Ethics in Small Language Models8 Jun 2024
- 2024Risk and Response in Large Language Models: Evaluating Key Threat Categories22 Mar 2024
- 2024Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction28 Feb 2024
- 2024The Ethics of Interaction: Mitigating Security Threats in LLMs22 Jan 2024
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 100
- 2023GPTEval: A Survey on Assessments of ChatGPT and GPT-4cited by 73
- 2024A Complete Survey on LLM-based AI Chatbotscited by 71
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 65
- 2024AI Safety in Generative AI Large Language Models: A Surveycited by 31
- 2023Distilled GPT for Source Code Summarizationcited by 30
- 2024Farsight: Fostering Responsible AI Awareness During AI Application Prototypingcited by 28
- 2023On the Detectability of ChatGPT Content: Benchmarking, Methodology, and Evaluation through the Lens of Academic Writingcited by 26
- 2023Using Large Language Models for Cybersecurity Capture-The-Flag Challenges and Certification Questionscited by 23
- 2024Towards Trustworthy AI: A Review of Ethical and Robust Large Language Modelscited by 21
12 most cited of 27 All 27 (JSON)
- 2026Reasoning and Planning with Dynamically Changing Norms26 May 2026
- 2025LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems12 Sep 2025
- 2025Two Birds with One Stone: Multi-Task Detection and Attribution of LLM-Generated Text19 Aug 2025
- 2025AI Ethics and Social Norms: Exploring ChatGPT's Capabilities From What to How25 Apr 2025
- 2025SOK: Exploring Hallucinations and Security Risks in AI-Assisted Software Development with Insights for LLM Deployment31 Jan 2025
- 2024AI Safety in Generative AI Large Language Models: A Survey6 Jul 2024
- 2024The Art of Saying No: Contextual Noncompliance in Language Models2 Jul 2024
- 2024A Complete Survey on LLM-based AI Chatbots17 Jun 2024
- 2024Towards Trustworthy AI: A Review of Ethical and Robust Large Language Models1 Jun 2024
- 2024Tagengo: A Multilingual Chat Dataset21 May 2024
- 2024Large Language Models for Cyber Security: A Systematic Literature Review8 May 2024
- 2024SmartMem: Layout Transformation Elimination and Adaptation for Efficient DNN Execution on Mobile21 Apr 2024
12 newest of 27 All 27 (JSON)